thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Resource-Based Policy

Policy attached directly to a resource, such as an S3 bucket or KMS key, specifying which principals can access it.

Definition

Resource-based policies include a Principal element and are supported by services such as S3, KMS, SQS, SNS, Lambda and Secrets Manager. They enable cross-account access without role assumption; within the same account, an allow in either the identity-based or resource-based policy is sufficient.

Example

An SQS queue policy allows an SNS topic in another account to send messages to the queue.

Exam tip

KMS key policies are mandatory: without the key policy allowing access, IAM policies alone cannot grant use of the key.

Related terms